$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa File: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (raw, json) Hash identifier: YgvU7sxrMhf4/I0u7F9ePehiaAqP0nrViPzYLyrcqg4= Subject key identifier: 1C:41:2C:40:0F:B9:9C:91:C5:72:C9:CF:0D:08:35:C5:F8:9F:25:21 Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 15636E20EC0C844FA99A79B7653674AE0BE54555 Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa Signing time: Sat 10 May 2025 07:27:11 +0000 ROA not before: Sat 10 May 2025 07:22:11 +0000 ROA not after: Sat 09 May 2026 07:27:11 +0000 asID: 208754 IP address blocks: 2a14:7580:730::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 05:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:63:6e:20:ec:0c:84:4f:a9:9a:79:b7:65:36:74:ae:0b:e5:45:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: May 10 07:22:11 2025 GMT Not After : May 9 07:27:11 2026 GMT Subject: CN=1C412C400FB99C91C572C9CF0D0835C5F89F2521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:e8:e9:c9:72:ec:49:c2:45:25:e3:3e:ff: 5a:1b:4b:b0:26:a7:99:88:c4:b9:65:39:ba:ad:31: 58:75:e2:9c:71:68:db:5b:15:e1:a0:f5:aa:b2:f3: 28:36:4b:7b:df:e2:3b:a2:27:1b:4c:e5:b8:4a:f1: 00:fd:90:08:12:f9:42:37:28:cb:73:07:d4:34:83: 7f:48:f6:28:7b:7f:ee:7a:4b:a0:01:b2:e1:f5:79: cc:c8:0d:7a:59:a9:0c:b6:70:da:b9:08:ed:8e:8d: eb:69:68:11:ca:53:f6:38:7f:cd:85:fc:24:73:33: 68:04:fd:09:d4:09:f8:ab:2d:09:bf:65:87:48:20: 25:b1:6d:d8:c2:1b:e1:dd:01:ab:30:08:50:83:04: 98:21:18:7a:40:3a:54:5f:87:9a:a3:ea:73:96:aa: 50:30:44:b3:94:b0:f7:25:1f:0b:17:07:8f:ea:f1: bb:05:04:fe:0b:be:55:23:f8:14:47:5e:08:b6:f9: de:9c:70:16:4e:96:9a:f0:3d:93:9c:9c:de:4c:9b: 92:c4:06:19:ef:71:50:79:65:d7:91:b3:0d:8c:14: 9b:f1:bc:5d:c1:5b:ee:44:4e:96:b1:e1:d7:14:6a: 8e:5c:68:5a:7f:94:92:e8:39:2e:66:28:a1:6c:38: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:2C:40:0F:B9:9C:91:C5:72:C9:CF:0D:08:35:C5:F8:9F:25:21 X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:730::/44 Signature Algorithm: sha256WithRSAEncryption 73:d0:4e:02:a6:a9:68:e0:77:71:55:ea:55:02:00:17:62:91: ef:83:b6:98:26:c1:01:84:8b:d4:71:b8:cc:c9:43:9a:46:eb: f9:fa:10:79:65:a2:6c:6e:4a:c8:d2:3c:e7:22:25:75:2d:a6: 1e:7c:68:08:52:e2:57:b9:d7:b5:07:8e:a2:61:13:42:fe:34: d7:aa:df:7f:ff:2b:b6:83:72:c6:b4:fb:f0:53:b1:41:d0:70: 60:a5:6f:10:bb:06:91:97:f9:01:5e:37:86:d9:c2:51:b5:ad: 5d:8f:fd:62:65:d1:84:2c:dc:b9:55:81:49:61:cf:01:95:be: 7e:00:90:66:55:37:3a:ba:23:a7:87:f6:2d:87:75:c0:dd:2a: b1:c8:28:4a:af:6a:44:68:d5:93:f7:58:c5:8e:68:8a:7c:2a: 29:38:b5:c0:39:b0:58:13:45:dc:92:32:f2:0d:9e:0a:90:e1: ed:aa:97:41:b6:ca:a8:13:b6:96:24:56:9c:74:9d:74:64:a4: 09:0a:f0:b1:07:35:64:ca:83:38:7a:73:46:e9:33:2e:29:62: b2:29:15:76:81:b5:c8:d6:8c:71:97:89:c3:03:be:72:0c:5d: 15:6f:bd:47:31:90:5c:db:98:b2:ef:75:55:e2:7c:55:19:8b: e5:ac:30:ff -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUFWNuIOwMhE+pmnm3ZTZ0rgvlRVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA1MTAwNzIyMTFaFw0yNjA1MDkwNzI3MTFaMDMxMTAvBgNV BAMTKDFDNDEyQzQwMEZCOTlDOTFDNTcyQzlDRjBEMDgzNUM1Rjg5RjI1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iejpyXLsScJFJeM+/1obS7Am p5mIxLllObqtMVh14pxxaNtbFeGg9aqy8yg2S3vf4juiJxtM5bhK8QD9kAgS+UI3 KMtzB9Q0g39I9ih7f+56S6ABsuH1eczIDXpZqQy2cNq5CO2OjetpaBHKU/Y4f82F /CRzM2gE/QnUCfirLQm/ZYdIICWxbdjCG+HdAaswCFCDBJghGHpAOlRfh5qj6nOW qlAwRLOUsPclHwsXB4/q8bsFBP4LvlUj+BRHXgi2+d6ccBZOlprwPZOcnN5Mm5LE BhnvcVB5ZdeRsw2MFJvxvF3BW+5ETpax4dcUao5caFp/lJLoOS5mKKFsON+RAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUHEEsQA+5nJHFcsnPDQg1xfifJSEwHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jNmZkNGVhMS1hMjY2LTRkZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTM3MzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAz ODM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYAHMDANBgkqhkiG9w0BAQsFAAOCAQEAc9BO AqapaOB3cVXqVQIAF2KR74O2mCbBAYSL1HG4zMlDmkbr+foQeWWibG5KyNI85yIl dS2mHnxoCFLiV7nXtQeOomETQv4016rff/8rtoNyxrT78FOxQdBwYKVvELsGkZf5 AV43htnCUbWtXY/9YmXRhCzcuVWBSWHPAZW+fgCQZlU3Orojp4f2LYd1wN0qscgo Sq9qRGjVk/dYxY5oinwqKTi1wDmwWBNF3JIy8g2eCpDh7aqXQbbKqBO2liRWnHSd dGSkCQrwsQc1ZMqDOHpzRukzLilisikVdoG1yNaMcZeJwwO+cgxdFW+9RzGQXNuY su91VeJ8VRmL5aww/w== -----END CERTIFICATE-----Generated at Fri Jun 6 22:57:53 2025 by rpki-client